This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft File: _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json) Hash identifier: GTv4d51NFVOYkJvRI7I3NcfiNXZHbnQFVZlBx2/jS7s= Subject key identifier: ED:CA:0A:24:8A:ED:2A:AC:20:58:9D:75:72:C9:54:6B:E6:B1:69:07 Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12 Certificate issuer: /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12 Certificate serial: 019AF50B5A5742EF20E30E2F979441139BA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft Manifest number: 05C7 Signing time: Sat 06 Dec 2025 19:02:32 +0000 Manifest this update: Sat 06 Dec 2025 19:02:32 +0000 Manifest next update: Sun 07 Dec 2025 19:02:32 +0000 Files and hashes: 1: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: YOv8c6BifbHAM8bIrQtxgBi374Dd/vndvoDt5JJ8qSM=) 2: vrcnG3rPeIv-84eM3hfeiXZcqyA.roa (hash: JWLSZU8dWBcg2FNxy+Ts9gij4yT1i3JNXoLy/WJRhwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:5a:57:42:ef:20:e3:0e:2f:97:94:41:13:9b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12 Validity Not Before: Dec 6 19:02:32 2025 GMT Not After : Dec 7 19:02:32 2025 GMT Subject: CN=edca0a248aed2aac20589d7572c9546be6b16907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:49:a8:d5:be:dd:95:27:c1:72:40:7c:30:f5: de:ad:49:83:ac:b2:41:bb:1b:a3:d3:09:17:0f:37: dd:d8:1f:8c:4d:98:c6:a4:8b:1a:f2:88:2c:67:df: 99:29:4b:58:59:82:f6:5b:e4:70:2b:26:1c:6f:42: 26:23:63:fa:c4:52:83:a5:01:57:4e:28:5d:c7:5b: 4c:50:6c:30:e7:0b:09:d3:cc:0e:5d:80:34:cc:08: 9c:e1:6b:84:68:f1:26:f7:58:74:3b:6d:2e:01:99: 56:77:d1:b3:fd:cc:b1:6f:1f:68:3b:2a:11:90:34: 2a:01:4a:18:ef:51:5a:63:d0:50:f7:d8:99:62:02: c2:44:cb:a1:60:d3:d4:66:2e:f8:1e:9b:cc:45:23: a6:01:dd:a6:8e:ca:1c:9d:60:40:36:33:12:af:3d: c9:9b:71:b5:e1:81:ee:19:8f:7d:cd:f3:2a:c4:b8: 73:6e:30:de:d3:cf:62:0e:5e:44:4a:2d:97:b5:4d: f6:e7:ee:39:88:de:3b:aa:ea:73:50:c5:e8:99:9f: a3:73:e8:9f:b8:11:a4:37:f9:e5:80:c3:6e:fb:09: 94:70:8a:ec:60:d3:e2:34:78:71:6f:09:18:73:ac: 00:a2:30:22:58:0a:92:39:e5:f2:ab:85:8c:3c:f0: 64:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CA:0A:24:8A:ED:2A:AC:20:58:9D:75:72:C9:54:6B:E6:B1:69:07 X509v3 Authority Key Identifier: keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:11:c6:1a:a0:59:d8:38:a6:2e:a8:ed:7e:4d:ee:b6:9f:ba: 3b:d2:97:4c:3d:6a:70:da:01:38:27:af:da:ad:84:6d:0f:43: 74:15:c3:3a:ed:f4:06:d0:9b:49:e0:f3:f1:6d:5d:9b:64:a0: 1b:4b:25:f7:ee:9a:2e:ae:7c:d5:2d:f0:a9:68:92:cd:bf:cf: b5:a0:05:ae:33:16:7e:47:10:ce:b7:bf:e6:ea:01:16:57:66: d3:b6:c1:a5:92:dd:cc:77:90:8f:8f:d6:28:a9:7f:06:72:9b: 78:d2:7d:ac:60:fc:82:c8:00:40:2d:a3:c5:e1:f0:2a:99:ef: 37:c9:2d:a7:d6:7e:0c:56:bf:56:9a:1a:7b:95:3d:5a:5b:c2: 4b:3f:05:ce:77:39:1f:85:37:ea:65:bd:ec:8a:ba:4c:4a:c3: 80:bb:5d:08:9c:a0:3f:37:06:c7:1b:27:57:cd:11:32:80:f0: 37:53:7b:59:76:cc:f8:10:50:6d:04:a9:40:21:0e:03:4c:90: 99:8b:8f:cd:d2:0b:43:a9:ee:48:63:67:95:6a:65:72:0c:da: 4e:eb:44:ef:fb:b0:6f:3f:18:3f:d2:53:7d:71:89:18:de:bd: b9:09:76:18:60:6c:da:0c:4a:79:50:78:d3:7d:78:35:d1:98: 4d:65:99:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C1pXQu8g4w4vl5RBE5uoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTEyOGE3NjJjZWViNmI1OWY1NDMxNTY4YmMxM2ZjZTQx YWJhMTIwHhcNMjUxMjA2MTkwMjMyWhcNMjUxMjA3MTkwMjMyWjAzMTEwLwYDVQQD EyhlZGNhMGEyNDhhZWQyYWFjMjA1ODlkNzU3MmM5NTQ2YmU2YjE2OTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskmo1b7dlSfBckB8MPXerUmDrLJB uxuj0wkXDzfd2B+MTZjGpIsa8ogsZ9+ZKUtYWYL2W+RwKyYcb0ImI2P6xFKDpQFX Tihdx1tMUGww5wsJ08wOXYA0zAic4WuEaPEm91h0O20uAZlWd9Gz/cyxbx9oOyoR kDQqAUoY71FaY9BQ99iZYgLCRMuhYNPUZi74HpvMRSOmAd2mjsocnWBANjMSrz3J m3G14YHuGY99zfMqxLhzbjDe089iDl5ESi2XtU325+45iN47qupzUMXomZ+jc+if uBGkN/nlgMNu+wmUcIrsYNPiNHhxbwkYc6wAojAiWAqSOeXyq4WMPPBkvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3KCiSK7SqsIFiddXLJVGvmsWkHMB8GA1UdIwQY MBaAFPyRKKdizutrWfVDFWi8E/zkGroSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yMWU2OGMtMWM0Yy00NTU5LTllMzAt MTM1ZDcwOWI1OWUwLzEvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yMWU2OGMtMWM0Yy00NTU5LTllMzAtMTM1ZDcwOWI1OWUw LzEvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBHGGqBZ 2DimLqjtfk3utp+6O9KXTD1qcNoBOCev2q2EbQ9DdBXDOu30BtCbSeDz8W1dm2Sg G0sl9+6aLq581S3wqWiSzb/PtaAFrjMWfkcQzre/5uoBFldm07bBpZLdzHeQj4/W KKl/BnKbeNJ9rGD8gsgAQC2jxeHwKpnvN8ktp9Z+DFa/Vpoae5U9WlvCSz8Fznc5 H4U36mW97Iq6TErDgLtdCJygPzcGxxsnV80RMoDwN1N7WXbM+BBQbQSpQCEOA0yQ mYuPzdILQ6nuSGNnlWplcgzaTutE7/uwbz8YP9JTfXGJGN69uQl2GGBs2gxKeVB4 0314NdGYTWWZzQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:48:55 2025 by rpki-client